Threats tagged 'ghsa-64jx-xh98-9hg9'

A use-after-free vulnerability in the Linux kernel's mt76 wireless driver (mt792x) has been resolved. The issue occurs due to a race condition where the STA (station) has been removed but the rx_status still references a pointer to the wcid in the STA, leading to invalid memory access. This vulnerability was fixed by setting the links' wcid pointers to NULL for a MLD in the mt7925_sta_pre_rcu_remove() function.